Lucene search
+L

4243 matches found

OpenVAS
OpenVAS
added 2021/03/05 12:00 a.m.28 views

Huawei EulerOS: Security Advisory for python2 (EulerOS-SA-2021-1543)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS8.6AI score0.08334EPSS
SaveExploits1References2
OpenVAS
OpenVAS
added 2021/03/05 12:00 a.m.26 views

Huawei EulerOS: Security Advisory for python (EulerOS-SA-2021-1512)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS8.6AI score0.08334EPSS
SaveExploits1References2
IBM Security Bulletins
IBM Security Bulletins
added 2021/03/04 3:24 a.m.58 views

Security Bulletin: IBM Watson Discovery for IBM Cloud Pak for Data affected by vulnerability in Python

Summary IBM Watson Discovery for IBM Cloud Pak for Data contains a vulnerable version of Python. Vulnerability Details CVEID: CVE-2020-26116 DESCRIPTION: Python is vulnerable to CRLF injection, caused by improper validation of user-supplied input in http.client. By inserting CR and LF control...

7.2CVSS0.7AI score0.06358EPSS
SaveExploits1Affected Software1
Tenable Nessus
Tenable Nessus
added 2021/03/04 12:00 a.m.51 views

EulerOS Virtualization 3.0.6.6 : python (EulerOS-SA-2021-1512)

According to the versions of the python packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - In Python 3 through 3.9.0, the Lib/test/multibytecodecsupport.py CJK codec tests call eval on content retrieved via...

9.8CVSS7.3AI score0.08334EPSS
SaveExploits1References3
Tenable Nessus
Tenable Nessus
added 2021/03/04 12:00 a.m.60 views

EulerOS Virtualization for ARM 64 3.0.6.0 : python2 (EulerOS-SA-2021-1543)

According to the versions of the python2 packages installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerabilities : - http.client in Python 3.x before 3.5.10, 3.6.x before 3.6.12, 3.7.x before 3.7.9, and 3.8.x before 3.8.5 allows CRLF...

9.8CVSS7.3AI score0.08334EPSS
SaveExploits1References3
Tenable Nessus
Tenable Nessus
added 2021/03/04 12:00 a.m.51 views

EulerOS Virtualization for ARM 64 3.0.6.0 : python3 (EulerOS-SA-2021-1560)

According to the versions of the python3 packages installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerabilities : - http.client in Python 3.x before 3.5.10, 3.6.x before 3.6.12, 3.7.x before 3.7.9, and 3.8.x before 3.8.5 allows CRLF...

9.8CVSS7.3AI score0.08334EPSS
SaveExploits1References3
OSV
OSV
added 2021/02/27 6:15 a.m.11 views

CVE-2021-27132

SerComm AG Combo VD625 AGSOT2.1.0 devices allow CRLF injection for HTTP header injection in the download function via the Content-Disposition header...

9.8CVSS7.3AI score0.16062EPSS
SaveExploits1References2
NVD
NVD
added 2021/02/27 6:15 a.m.31 views

CVE-2021-27132

SerComm AG Combo VD625 AGSOT2.1.0 devices allow CRLF injection for HTTP header injection in the download function via the Content-Disposition header...

9.8CVSS0.16062EPSS
SaveExploits1References1
Prion
Prion
added 2021/02/27 6:15 a.m.26 views

Crlf injection

SerComm AG Combo VD625 AGSOT2.1.0 devices allow CRLF injection for HTTP header injection in the download function via the Content-Disposition header...

7.5CVSS9.6AI score0.16062EPSS
SaveExploits1References2Affected Software1
CVE
CVE
added 2021/02/27 5:01 a.m.180 views

CVE-2021-27132

The CVE-2021-27132 issue affects Sercomm VD625 Smart Modems (firmware AGSOT_2.1.0). The vulnerability is a CRLF injection in the Content-Disposition header during the download function, enabling header manipulation that could enable session hijacking, cross-site scripting, or cache poisoning as d...

9.8CVSS9.6AI score0.16062EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
added 2021/02/27 5:01 a.m.39 views

CVE-2021-27132

SerComm AG Combo VD625 AGSOT2.1.0 devices allow CRLF injection for HTTP header injection in the download function via the Content-Disposition header...

9.9AI score0.16062EPSS
SaveExploits1References1
CNNVD
CNNVD
added 2021/02/27 12:00 a.m.14 views

Sercomm AG Combo VD625 AGSOT Injection Vulnerability

Sercomm AG Combo VD625 AGSOT is an application from Sercomm China. provides a comprehensive telecom broadband solution. An injection vulnerability exists in SerComm AG Combo VD625 AGSOT2.1.0 that allows CRLF injection...

9.8CVSS7.3AI score0.16062EPSS
SaveExploits1References3
Gitee
Gitee
added 2021/02/26 8:37 p.m.7 views

PayloadsAllTheThings

This repository is an offensive tool for Web Application Security and Pentest/CTF. It contains a list of useful payloads and bypass for various web application security vulnerabilities. The repository includes tools and exploits for vulnerabilities such as CRLF injection, CSRF injection, and CORS...

7.2AI score
SaveExploits0
OSV
OSV
added 2021/02/18 1:25 p.m.13 views

SUSE-SU-2021:0515-1 Security update for python-urllib3

This update for python-urllib3 fixes the following issues: - CVE-2020-26116: Raise ValueError if method contains control characters and thus prevent CRLF injection into URLs bsc1177211...

7.2CVSS7.4AI score0.06358EPSS
SaveExploits1References3
OSV
OSV
added 2021/02/16 10:13 a.m.7 views

SUSE-SU-2021:0486-1 Security update for python-urllib3

This update for python-urllib3 fixes the following issues: - CVE-2020-26116: Raise ValueError if method contains control characters and thus prevent CRLF injection into URLs bsc1177211...

7.2CVSS7.4AI score0.06358EPSS
SaveExploits1References3
OSV
OSV
added 2021/02/08 4:40 p.m.10 views

SUSE-SU-2021:0342-1 Security update for python-urllib3

This update for python-urllib3 fixes the following issues: - CVE-2020-26116: Raise ValueError if method contains control characters and thus prevent CRLF injection into URLs bsc1177211...

7.2CVSS7.4AI score0.06358EPSS
SaveExploits1References3
OSV
OSV
added 2021/02/08 4:40 p.m.12 views

SUSE-SU-2021:0341-1 Security update for python-urllib3

This update for python-urllib3 fixes the following issues: - CVE-2020-26116: Raise ValueError if method contains control characters and thus prevent CRLF injection into URLs bsc1177211. - Skip test for RECENTDATE bsc1181571...

7.2CVSS7.4AI score0.06358EPSS
SaveExploits1References4
OpenVAS
OpenVAS
added 2021/02/05 12:00 a.m.26 views

Huawei EulerOS: Security Advisory for python (EulerOS-SA-2021-1226)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS8.6AI score0.08334EPSS
SaveExploits1References2
Tenable Nessus
Tenable Nessus
added 2021/02/04 12:00 a.m.55 views

EulerOS 2.0 SP5 : python (EulerOS-SA-2021-1226)

According to the versions of the python packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - In Python 3 through 3.9.0, the Lib/test/multibytecodecsupport.py CJK codec tests call eval on content retrieved via HTTP.CVE-2020-27619 -...

9.8CVSS7.3AI score0.08334EPSS
SaveExploits1References3
OSV
OSV
added 2021/02/03 6:51 p.m.12 views

SUSE-SU-2021:0299-1 Security update for python-urllib3

This update for python-urllib3 fixes the following issues: - Raise ValueError if method contains control characters and thus prevents CRLF injection into URLs bsc1177211, bpo39603, CVE-2020-26116,...

7.2CVSS7.4AI score0.06358EPSS
SaveExploits1References3
Rows per page
Query Builder